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This paper describes the motivation, design and performance of Porcupine, a scalable mail 
server. The goal of Porcupine is to provide a highly available and scalable electronic mail 
service using a large cluster of commodity PCs. We designed Porcupine to be easy to 
manage by emphasizing dynamic load balancing, automatic configuration, and graceful 
degradation in the presence of failures. Key to the system's manageability, availability, 
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To provide high availability for services such as mail or bulletin boards, data must be 
replicated. One way to guarantee consistency of replicated data is to force service 
operations to occur in the same order at all sites, but this approach is expensive. For 
some applications a weaker causal operation order can preserve consistency while 
providing better performance. This paper describes a new way of implementing causal 
operations. Our technique also supports two other kinds of operations: ... 

Keywords: client/server architecture, fault tolerance, group communication, high 
availability, operation ordering, replication, scalability, semantics of application 



Dealin g with s e rv er corruption in weakly cons i ste nt, r ep licated d ata syste ms 
Mike j. Spreitzer, Marvin M. Theimer, Karin Petersen, Alan J. Demers, Douglas B. Terry 
September 1997 Proceedings of the 3rd annual ACM/IEEE international conference on 

Mobile computing and networking 
Publisher: ACM Press 

Full text available: ^ pdf(1.14 MB) Additional Information: full citation , references , citings , index terms 



Manageability, availability and performance in Porcupine: a highly scalable, cluster- 
based mail service 

Yasushi Saito, Brian N. Bershad, Henry M. Levy 

December 1999 ACM SIGOPS Operating Systems Review , Proceedings of the 

seventeenth ACM symposium on Operating systems principles SOSP 

'99, Volume 33 Issue 5 
Publisher: ACM Press 

Full text available" fjj^ pdf(1.62 MB) Additional Information: full citation , abstract , references , citings, index 

terms 

This paper describes the motivation, design, and performance of Porcupine, a scalable 
mail server. The goal of Porcupine is to provide a highly available and scalable electronic 
mail service using a large cluster of commodity PCs. We designed Porcupine to be easy to 
manage by emphasizing dynamic load balancing, automatic configuration, and graceful 
degradation in the presence of failures. Key to the system's manageability, availability, 
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We present a protocol for unlinkable serial transactions suitable for a variety of network- 
based subscription services. It is the first protocol to use cryptographic blinding to enable 
subscription services. The protocol prevents the service from tracking the behavior of its 
customers, while protecting the service vendor from abuse due to simultaneous or cloned 
use by a single subscriber. Our basic protocol structure and recovery protocol are robust 
against failure in protocol termination. ... 
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The overall increase in traffic on the World Wide Web is augmenting user-perceived 
response times from popular Web sites, especially in conjunction with special events. 
System platforms that do not replicate information content cannot provide the needed 
scalability to handle large traffic volumes and to match rapid and dramatic changes in the 
number of clients. The need to improve the performance of Web-based services has 
produced a variety of novel content delivery architectures. This article w ... 
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The widespread deployment of inexpensive communications technology, computational 
resources in the networking infrastructure, and network-enabled end devices poses an 
interesting problem for end users: how to locate a particular network service or device out 
of hundreds of thousands of accessible services and devices. This paper presents the 
architecture and implementation of a secure wide-area Service Discovery Service (SDS). 
Service providers use the SDS to advertise descriptions of available ... 
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The Internet in its present form does not protect content from censorship. It is 
straightforward to trace any document back to a specific Web server, and usually directly 
to an individual. As we discuss below, there are valid reasons for publishing a document in 
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a censorship-resistant manner. Unfortunately, few tools exist that facilitate this form of 
publishing. We describe the architecture of robust systems for publishing content on the 
Web. The discussion is in the context of Publius, as that ... 

Keywords: Censorship resistance, Web publishing 
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Our growing reliance on online services accessible on the Internet demands highly 
available systems that provide correct service without interruptions. Software bugs, 
operator mistakes, and malicious attacks are a major cause of service interruptions and 
they can cause arbitrary behavior, that is, Byzantine faults. This article describes a new 
replication algorithm, BFT, that can be used to build highly available systems that tolerate 
Byzantine faults. BFT can be used in practice to implement re ... 

Keywords: Byzantine fault tolerance, asynchronous systems, proactive recovery, state 
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Distributed computer architectures labeled "peer-to-peer" are designed for the sharing of 
computer resources (content, storage, CPU cycles) by direct exchange, rather than 
requiring the intermediation or support of a centralized server or authority. Peer-to-peer 
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architectures are characterized by their ability to adapt to failures and accommodate 
transient populations of nodes while maintaining acceptable connectivity and 
performance. Content distribution is an important peer-to-peer application ... 

Keywords: Content distribution, DHT, DOLR, grid computing, p2p, peer-to-peer 
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When distributed systems first appeared, they were programmed in traditional sequential 
languages, usually with the addition of a few library procedures for sending and receiving 
messages. As distributed applications became more commonplace and more 
sophisticated, this ad hoc approach became less satisfactory. Researchers all over the 
world began designing new programming languages specifically for implementing 
distributed applications. These languages and their history, their underlying pr ... 
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We propose a generalization of the architecture of an electronic wallet, as first developed 
in the seminal European research project CAFE. With this model you can leave most of the 
content of your electronic wallet at the security of your residential electronic keeper, while 
roaming with your favorite mobile terminals. Emerging mobile handsets with both short 
range Bluetooth and cellular GPRS communications provide a sufficient communication 
platform for this electronic wallet architecture. Howe ... 

Keywords: digital credentials, e-wallet architecture, mobile commerce, payment 
protocols, privacy 
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We discuss the dangers that scalable Internet functionality may present to the real world, 
focusing on a simple yet impactful attack that we believe may occur quite soon. We offer 
and critique various solutions to this class of attack and hope to provide a warning to the 
Internet community of what is currently possible. The attack is, to some degree, a 
consequence of the availability of private information on the Web, and the increase in the 
amount of personal information that users must reveal ... 

Keywords: Internet Threats, automated attacks, computer security, comuter security, 
cybercrime, internet threats 
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We discuss the dangers that scalable Internet functionality may present to the real world, 
focusing upon an attack that is simple, yet can have great impact, which we believe may 
occur quite soon. We offer and critique various solutions to this class of attack and hope 
to provide a warning to the Internet community of what is currently possible. The attack 
is, to some degree, a consequence of the availability of private information on the Web, 
and the increase in the amount of personal informati ... 
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In this paper we present the Session Token Protocol (STOP), a new protocol that can 
assist in the forensic analysis of a computer involved in malicious network activity. It has 
been designed to help automate the process of tracing attackers who log on to a series of 
hosts to hide their identity. STOP utilizes the Identification Protocol infrastructure, 
improving both its capabilities and user privacy. On request, the STOP protocol saves 
user-level and application-level data associated with a par ... 

Keywords: Digital forensics, TCP traceback, auditing and intrusion detection, digital 
investigations, privacy 
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